
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/6CAC2064EA2211EA9C2F064AC4F9AE02.roa
File: 6CAC2064EA2211EA9C2F064AC4F9AE02.roa (raw, json)
Hash identifier: HgX4tCn4FMdl0R/ylo4Q2his11f507x0EEUUjL+i3vA=
Subject key identifier: 2D:9A:E7:23:D6:4E:F2:6B:19:0A:3E:B3:75:5D:54:5A:31:9A:F6:31
Certificate issuer: /CN=A9127EAD/serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E
Certificate serial: 087F
Authority key identifier: 5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/6CAC2064EA2211EA9C2F064AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:21:47 +0000
ROA not before: Tue 30 Sep 2025 21:22:52 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 141038
IP address blocks: 103.155.42.0/24 maxlen: 24
103.168.208.0/24 maxlen: 24
2001:df4:b080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl
rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:15:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2175 (0x87f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127EAD, serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E
Validity
Not Before: Sep 30 21:22:52 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a42f5b-375e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3c:e3:9b:5d:e9:fe:ce:56:a8:13:35:bc:d8:
bc:ae:57:01:e5:b1:18:1d:72:ff:99:d5:88:2e:18:
90:1a:0c:ce:ce:47:e6:07:d2:0f:f8:0c:8f:f5:2b:
b7:62:cc:cc:87:a4:51:e1:ec:50:0b:de:c8:aa:6a:
fe:d8:a2:ad:e3:41:18:1d:84:d3:a6:c2:d9:8a:4f:
d6:2a:e8:ba:ff:a0:9e:4c:80:9c:d8:ff:b0:9b:2a:
38:c1:06:bb:f1:6d:73:c3:20:83:d5:54:e4:0b:f2:
91:40:1f:2e:ec:62:ae:b6:87:c5:66:8a:b2:36:f7:
cb:59:20:9b:e8:78:f3:7a:a6:bb:b7:95:14:da:d3:
9e:be:67:00:84:ed:f8:b7:da:03:36:3e:3c:d4:ca:
b8:e6:b2:c4:38:74:b0:a2:01:45:5b:60:5c:76:c3:
25:79:5e:5f:c3:2a:ec:d1:55:0b:2c:bd:57:e2:de:
7b:d9:f7:6b:3c:8f:d1:1c:9b:ff:a3:25:c3:ed:d0:
b4:ea:06:38:65:98:02:a0:29:86:5b:33:3b:50:3a:
69:f0:3c:14:5d:b3:60:0d:41:5c:d2:9c:ea:4a:da:
38:54:30:b1:d9:ab:d1:bc:b7:a2:77:5b:21:75:92:
c4:27:13:c2:b9:98:a3:3b:2e:b2:06:e2:7f:83:aa:
38:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9A:E7:23:D6:4E:F2:6B:19:0A:3E:B3:75:5D:54:5A:31:9A:F6:31
X509v3 Authority Key Identifier:
keyid:5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/6CAC2064EA2211EA9C2F064AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.155.42.0/24
103.168.208.0/24
IPv6:
2001:df4:b080::/48
Signature Algorithm: sha256WithRSAEncryption
90:cf:e9:53:47:b6:29:d5:ae:09:0f:3e:2e:c3:e0:7c:db:1b:
6b:43:17:53:da:92:6f:2b:98:50:43:8e:ce:c1:9b:4e:8d:65:
97:1e:e1:89:c4:ef:8d:0b:50:8c:bf:00:20:7e:ff:f4:ff:cd:
f6:f0:f0:46:6e:43:5a:15:c9:46:c5:41:71:1f:b9:32:12:1d:
49:c4:5b:78:2a:07:5d:71:62:7e:ba:14:ff:9d:0b:95:bb:9a:
01:1b:ff:b2:6b:d7:4a:02:fc:34:62:df:fb:06:13:a7:e3:4c:
44:8e:93:18:08:a3:e5:dc:1d:3b:7f:4e:62:25:d9:59:c9:49:
bf:f7:b5:8a:84:40:27:51:63:c3:bd:f3:4f:8d:9d:a0:f2:40:
6f:09:4b:c4:07:35:ec:42:c1:03:a2:b0:6b:a2:d8:55:ee:5c:
fe:f8:b1:3c:9b:3e:04:7b:e7:10:6f:20:9f:c3:6d:13:dd:f7:
73:31:f5:2c:65:d6:ea:41:5b:44:56:9f:7b:89:40:af:94:d9:
13:90:40:f0:85:ee:53:d1:14:db:49:88:11:b8:02:ab:12:9e:
7f:bb:98:1b:fb:9a:e8:e1:1f:0e:7a:29:79:f3:85:71:9c:0f:
0e:e0:4f:c6:d7:75:19:1e:65:ff:05:06:d4:cf:ba:c4:40:80:
36:33:0e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:01:08 2026 by rpki-client